Open Vulnerability and Assessment Language (OVAL)
Contact Us Downloads News December 4, 2008 Search
link to OVAL home page

View Definition

Definition Id: oval:org.mitre.oval:def:1311 Date: 2005-08-15
Title: RHE4 Firefox InstallTrigger Callback Vulnerability
Description: The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.
Version: 1 Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2005-2263
Family: unix
Platform(s): Red Hat Enterprise Linux 4 Product(s):
Definition Synopsis:

OVAL is CVE Compatible